Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
File:                     7XlzzE58-_RHB0eBDEFuzH6YGIU.mft (raw, json)
Hash identifier:          gc9TgjfbD7+6WEiweNfqFWoqqXpe3qXSKw5U4Kj11h8=
Subject key identifier:   30:B7:A8:87:3C:25:80:9D:26:31:A1:96:88:69:17:44:3C:F3:B6:A8
Authority key identifier: ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85
Certificate issuer:       /CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
Certificate serial:       0198D5BC130DE5C68853E8399B1F04119644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
Manifest number:          11C1
Signing time:             Sat 23 Aug 2025 07:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:09 +0000
Files and hashes:         1: 7XlzzE58-_RHB0eBDEFuzH6YGIU.crl (hash: shF1eh0hJYB06bfjO6uRf0xHWNUIzE557nX/G/vQ0Os=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:13:0d:e5:c6:88:53:e8:39:9b:1f:04:11:96:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7973cc4e7cfbf4470747810c416ecc7e981885
        Validity
            Not Before: Aug 23 07:02:09 2025 GMT
            Not After : Aug 24 07:02:09 2025 GMT
        Subject: CN=30b7a8873c25809d2631a196886917443cf3b6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:38:70:d9:a0:3b:fd:9a:6d:58:82:a5:17:
                    ee:cb:69:57:09:8a:30:9b:cf:03:54:a8:e5:b6:a2:
                    4e:77:e3:29:64:c4:69:d1:89:28:83:25:c1:b8:d8:
                    2c:b6:bf:f3:da:7f:7c:7b:49:bd:d5:38:bf:39:58:
                    64:a2:98:0d:84:07:18:f8:f1:34:5b:bb:bc:ec:a2:
                    63:72:03:6c:49:22:b1:91:07:67:9d:93:be:fd:3a:
                    59:c7:ca:86:db:13:ab:7a:ec:c4:81:4e:e3:c0:11:
                    b1:16:b9:fc:80:a1:36:23:60:52:e5:72:2f:0f:15:
                    f1:d8:d8:c0:9f:54:81:e8:d9:4b:d7:bf:a4:66:f2:
                    74:94:bb:18:d5:d5:65:4d:ad:ca:64:5e:e1:15:6f:
                    c6:17:e9:95:22:c3:75:d5:9a:ef:b8:2d:3d:5c:59:
                    6c:51:d1:05:0d:d6:fc:c7:8f:88:d5:df:ad:c5:da:
                    f8:3d:72:7c:53:20:48:5f:9b:04:89:74:bc:ab:c3:
                    90:71:75:32:a5:db:59:cb:5b:e6:cd:61:7f:96:96:
                    72:a8:c2:8f:03:f1:c5:a6:09:ef:62:f5:07:b6:48:
                    eb:e1:1c:03:e5:f9:1a:e1:c3:c7:21:2f:1f:4d:8e:
                    50:36:22:53:3c:ea:21:48:5c:75:6b:2c:53:65:17:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B7:A8:87:3C:25:80:9D:26:31:A1:96:88:69:17:44:3C:F3:B6:A8
            X509v3 Authority Key Identifier:
                keyid:ED:79:73:CC:4E:7C:FB:F4:47:07:47:81:0C:41:6E:CC:7E:98:18:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XlzzE58-_RHB0eBDEFuzH6YGIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6e3744-9dd9-423e-ab99-78f982dfc32f/1/7XlzzE58-_RHB0eBDEFuzH6YGIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:38:6b:7c:07:dd:f4:2b:d4:1f:1a:6e:d5:b8:92:24:91:
         ec:54:b9:8a:d1:92:09:de:d4:75:6b:42:1c:bf:29:e2:d4:a0:
         ef:eb:6d:23:96:ff:f9:64:43:7f:40:7d:16:33:c6:0b:23:c0:
         00:e4:5e:36:8e:a7:62:bb:0b:dd:60:54:71:76:a3:fb:68:74:
         87:51:da:c3:74:12:85:80:a2:6e:fd:0a:8a:77:43:df:2e:2b:
         77:1b:77:2b:70:19:9a:a1:97:b1:f6:c8:43:c4:ea:79:cd:ab:
         09:e7:af:7e:13:aa:fc:fa:2d:c7:c7:22:2c:04:2f:1d:47:74:
         dd:dc:81:1f:ae:4b:8f:83:5c:55:03:00:3e:05:6a:88:3f:f1:
         b6:c9:de:ad:62:ad:4d:b8:04:a8:58:c7:01:a5:31:1a:15:24:
         f6:d9:52:19:95:41:2b:33:2f:b4:f7:b3:0a:39:69:ff:a4:03:
         cd:7a:a0:02:23:17:c4:eb:c0:aa:7c:52:7e:1c:37:d3:a2:73:
         97:45:3f:bf:c6:10:0a:17:13:6c:18:43:10:89:a6:78:ec:b3:
         a0:11:ef:ab:28:17:34:ce:5f:3a:ae:b7:c5:c9:4a:94:b3:4b:
         43:1a:53:fa:e3:21:de:9a:6b:39:e6:74:93:2a:7b:f7:ab:46:
         8e:58:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:01 2025 by rpki-client